Threats tagged 'ghsa-4q46-6c8h-gp75'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-129267sergix44 XBackBone · Cross-site Scripting Medium5.12026-11-14GCVE DatabaseCVE-2026-129267 A cross-site scripting (XSS) vulnerability exists in sergix44 XBackBone up to version 3.8.2 in the MediaController::getRawById function. This vulnerability allows remote attackers to inject malicious scripts. Public exploit code is available, but the fix is pending acceptance of a pull request. Report on CVE-2026-129267 Vulnerability CWE-79 #ghsa-4q46-6c8h-gp75	GCVE Database	2026-11-14

Page 1 of 1